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Dear Sir: 

This second revised Appeal Brief is submitted in response to 
the Notification of Non-Compliant Appeal Brief dated March 27, 
2006, setting a one-month shortened statutory period of brief 
filing expiring A.pril 27, 2006- 

No fee is believed due with this brief, however, should a 
fee be required please charge Deposit Account 50-0510. 



The real party in interest is International Business 
Machines Corporation, as evidenced by the assignment set forth at 
Reel 011786, Frame 0585. 
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Rela'tdd Appeals And Intiexfesrences 
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Status of Claims 

Claims 1-15 and 17-21 are pending in the instant 
application, with claims 1, 11, and 18 being independent claims. 
Claim 16 is cancelled. 

Claims 1-15 and 17-21 stand finally rejected by the Examiner 
as noted in the Final Office Action dated May 31, 2005 <"'FOA"). 
The rejection of claims 1-15 and 17-21 is appealed. 

The table below summarizes the status of the claims. 



Claim <s) 


Status 


Appealed 


1 


Amended 


Yes 


2-4 


Original 


Yes 


5 


Amended 


Yes 


6-8 


Original 


Yes 


9-11 


Amended 


Yes 


12 


Original 


Yes 


13-14 


Amended 


Yes 


15 


Original 


Yes 


16 


Canceled 


No 


17 


Original 


Yes 


18 


Amended 


Yes 


19-21 


Original 


Yes 



Status o£ Amendments 

No amendments to the claims were made after the final 
re j ect ion . 
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Summary of the Claimed Subject Matter 

The present invention relates to digital signature 
certificates and certificate revocation lists. App., pg. 1, In. 
4-6. Digital signature certificates are used in electronic 
cominerce to authenticate subscribers (e.g., merchants) that rely 
on digital signatures. Digital signature certificates are issued 
by several trusted third parties known as certificate authorities 
(CAs) . App-, pg. 2, In. 1-10- 

Sometimes a CA revokes a certificate, and the revoked 
certificate is listed in a certificate revocation list (CRL) . 
App., pg. 3, In. 19-21. Different CAs may use a different CRL 
distribution mechanisms, and a party checking CRLs needs to know 
each distribution mechanism. App., pg. 4, In. 14-18. 
Furthermore, some CAs may change their CRL distribution mechanisms 
from time to time, and this may impose significant modification to 
the way applications can access their CRL. App,, pg . 4, In. 18- 
21. 

With this brief background, one aspect of the present 
invention, as recited in claim 1 , is a system that includes a 
plurality of certificate authorities (CAs) in which each CA 
maintains and distributes digital certificates revoked by itself 
in the form of a certificate revocation list (CRL), and different 
CAs may use different CRL distribution mechanisms. App., Fig. 1- 
For different CRL distribution methods, different CRL retrieval 
agents are used to periodically retrieve CRLs from different CAs 
and consolidate them- into a central CRL database. App., pq. 11, 
In. 11-16. These agents are configured to reside at the central 
database, run periodically to retrieve CRLs from designated 
servers, and update the central database accordingly. App., pg. 
12, In. 3-6. 

For example, agents such as an LDAP Retriever, HTTP 
Retriever, RFC1424 Requester, RFC1424 Receiver and HttpReceiver 
are described in the specification of the pending application. 
App., pg- 16, In- 5-7. Each agent is designed to conform to a 
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particular distribution mechanism. Thus, the present invention 
enables an electronic commerce application to have easier, faster 
and less costly access to CRLs in a central location. App. , pg . 
12, In. 7-16. 

The CRL databases are configured to store at least one 
individually identifiable revoked digital certificate. App., pg - 
8, In. 16-18. Additionally, the system includes a CRL access user 
interface which provides a uniform set of Application Program 
Interfaces for users accessing the CRLs in the CRL database. 
App., pg. 12, In- 13-16. Thus, the system enables consolidation 
and access of the certificate revocation lists CCRLs) from the 
plurality of certificate authorities (CAs) » App., pg . 21, In. 9- 
18 and Fig. 8. 

Similarly, the invention may be embodied as a method for 
certificate revocation list consolidation and access in a secure 
network, such as recited in claims 11 and 18 of the present 
application, App., pg. 21, In. 19 - pg. 22, In. 2 and Fig. 8. 

Grounds for Rejection to t>© Reviewed, on Appeal 

I. Whether claims 1-15 and 17-21 are obvious over the cited 

art . 

Argument 

I. Claims 1-15 and 17-21 are not Obvious Over the Cited Art 

Claim 1 

Claim 1 was rejected as allegedly obvious over U.S. Patent 
No- 6,442,689 issued to Kocher (herein ^"Kocher") in view of U.S. 
Patent No. 6,128,740 issued to Curry et al . (herein "Curry") and 
in further view of U.S. Patent No. 6,411,956 issued to Ng {herein 
"Ng") . FOA, pg. 2. A prima facie case for obviousness can only 
be made if the combined reference documents teach or suggest ail 
the claim limitations. MPEP 2143- 
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Claim 1 recites, in part, ^^multiplc CRL retrieval agents 
configured to periodically retrieve CRLs at time intervals from 
different CAs using a plurality of CRL retrieval agents based on 
the CRL distribution mechanisms of CAs." App . ^ claim 1- The 
Final Office Action concedes that neither Kocher nor Ng teach such 
limitations, but alleges Curry discloses the claim element at 
column 2, lines 26-41. FOA, pg. 3, In. 1-4. The Appellant 
respectfully disagrees with the Examiner's interpretation of 
Curry's teachings. 

The citation offered by the Examiner states. 

Conversely, if certificate revocation lists are published 
too frequently, such as every ten minutes, a significant 
overhead burden is placed on the certification authority 
server (manager) which can significantly reduce the 
efficiency of the overall system particularly where a 
manager may serve hundreds of thousands of clients. Other 
systems are known which allow a client to cache certificate 
revocation lists for a period of time to reduce 
communication overhead with the manager. Some such known 
security systems for networked computers also segment 
certificate revocation list in repository memory to allow 
recordation of both revocation data and the expiry lapse 
data. However such systems again, typically only utilize 
certification authorities or managers that collect revoked 
certificates and queue them to publish them on a periodic 
basis with other existing revoked certificates. Curry, col. 
2, In. 26-41. 

Contrary to the Examiner's assertions, this passage 
discusses publishing CRLs by CAs, and does not describe retrieval 
agents configured to periodically retrieve CRLs. The passage 
mentions systems that allow a client to cache certificate 
revocation lists for a period of time to reduce communication 
overhead with the manager, but there is no teaching of multiple 
CRL retrieval agents configured to periodically retrieve CRLs at 
time intervals from different CAs using a plurality of CRL 
retrieval agents based on the CRL distribution mechanisms of CAs, 
as recited in claim 1 . 

The Examiner states, ''Curry teaches utilizing certification 
authorities or managers collect revoked certificates and queue 
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them to publish thcin on periodic basis-" FOA, pg. 9-10. Again, 
the Appellant submits that such a statement does not describe 
retrieval agents configured to periodically retrieve CRLs . 

It is therefore respectfully submitted that the cited art 
does not respond to the limitation of claim 1 requiring multiple 
CRL retrieval agents configured to periodically retrieve CRLs at 
time intervals from different CAs using a plurality of CRL 
retrieval agents based on the CRL distribution mechanisms of CAs . 

In proposing to combine Kocher and Curry to account for the 
multiple CRL retrieval agents arrangement specified in claim 1 and 
missing in Kocher, the Examiner submits that it would have been 
obvious to one of ordinary skill in the art ''to modify the CRL 
system of Kocher by incorporating the means of using multiple CRL 
retrieval agents to periodically retrieve CRLs as disclosed by 
Curry." FOA, pg. 3, In. 4-7. However, as discussed above, this 
alleged motivation is based on the false premise that such a 
Leaching exists in Curry. 

Moreover, obviousness cannot be established by combining 
prior art to produce the claimed invention absent some teaching or 
suggestion supporting the combination. In re Fr itch , 972 F.2d 
1260, 1266, 23 USPQ2d 1780, 1783-84 (Fed. Cir. 1992). The mere 
fact that the prior art may be modified in the manner suggested by 
an examiner does not make the modification obvious unless the 
prior art suggested the desirability of the modification. Id . 

In the present case, the advantage alleged by the Examiner 
to justify the proposed combination of Kocher and Curry does not 
stand up to close scrutiny. More particularly, the Examiner has 
not explained, and it is not evident, why a person of ordinary 
skill in the art would have found it obvious to reconstruct the 
Kocher system for creating digitally-signed lists to include the 
certificate revocation publishing methods taught by Curry. In 
this light, it is apparent that the only suggestion for combining 
Kocher and Curry in the manner advanced by the Examiner stems from 
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hindsight knowledge impermissibly derived from the Appellant's 
disclosure . 

For at least these reasons, the Appellant respectfully 
asserts that the Examiner has not established a prima facie case 
of obviousness for claim 1. The Appellant submits that the 
rejection of claim 1 is improper and requests that the rejection 
of claim ^ be reversed by the honorable Hoard. 

Claims 2-10 

Claims 2-10 are dependent on and further limit claim 1. 
Since the rejection of claim 1 is believed improper, the rejection 
of claims 2-10 are also believed improper for at least the same 
reasons as claim 1. 

Claim II 

Claim 11 was rejected as allegedly obvious over Kocher in 
view of Curry and in further view of Ng. FOA, pg. 2- A prima 
facio case for obviousness can only be made if the combined 
reference documents teach or suggest all the claim limitations. 
MPEP 2143. 

Claim 11 recites, in part, "'periodically retrieving CRLs at 
time intervals from different CAs using a plurality of CRL 
retrieval agents based on the CRL distribution mechanisms of CAs." 
App., claim 11. Claim 11 appears to be rejected under reasoning 
very similar to claim 1. FOA, pg . 4, Specifically, the Final 
Office Action indicates that neither Kocher nor Ng teach the 
preceding limitations, but alleges Curry discloses the claim 
element at column 2, lines 26-41. FOA, pg . 4-5. 

As discussed above, the Appellant respectfully disagrees 
with the Examiner's interpretation of Curry's teachings. Contrary 
to the Examiner's assertions, there is no teaching in Curry of 
periodically retrieving CRLs at time intervals from different CAs 
using a plurality of CRL retrieval agents based on the CRL 
distribution mechanisms of CAs, as recited in claim 11. 
Additionally, the only suggestion for combining Kocher and Curry 
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in the manner advanced by the Examiner stems from hindsight 
knowledge imperiniss ibly derived from the Appellants disclosure. 

For at least these reasons, the Appellant respectfully 
asserts that the Examiner has not established a prima facie case 
of obviousness for claim 11. The Appellant submits that the 
rejection of claim 11 is improper and requests that the reiection 
of claim 11 be reversed by the honorable Board. 

Claims 12-15 and 17 

Claims 12-15 and 17 are dependent on and further limit claim 
11. Since the rejection of claim 11 is believed improper, the 
rejection of claims 12-15 and 17 are also believed improper for at 
least the same reasons as claim 11. 

Claim 18 

Claim 18 was rejected as allegedly obvious over Kocher in 
view of Curry and in further view of Ng . FOA, pg, 2. A prima 
facie case for obviousness can only be made if the combined 
reference documents teach or suggest all the claim limitations. 
MPEP 2143. 

Claim 18 recites, in part, ^'creating a plurality of CRL 
retrieval agents based on the CRL distribution mechanisms of CAs, 
the retrieval agents configured to periodically retrieve CRLs at 
time intervals from the different CAs and to consolidate the CRLs 
from multiple CAs." App . , claim 18. The Final Office Action 
states that claim 18 is rejected on the same grounds as claim 11. 
rOA, pg . 6. 

As discussed above, the Appellant respectfully disagrees 
with the Examiner's interpretation of Curry's teachings. Contrary 
to the Examiner's assertions, there is no teaching in Curry of 
creating a plurality of CRL retrieval agents based on the CRL 
distribution mechanisms of CAs, the retrieval agents configured to 
periodically retrieve CRLs at time intervals from the different 
CAs and to consolidate the CRLs from multiple CAs, as recited in 
claim 18. Additionally, the only suggestion for combining Kocher 
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and Curry in the manner advanced by the Examiner stems from 
hindsight knowledge impermissibly derived from the Appellant's 
disclosure . 

For at least these reasons, the Appellant respectfully 
asserts that the Examiner has not established a prima facie case 
of obviousness for claim 18. The Appellant submits that the 
rejection of claim 18 is improper and requests that the rejection 
of claim 18 be reversed by the honorable Board. 

Claims 19-21 

Claims 19-21 are dependent on and further limit claim 18. 
Since the rejection of claim 18 is believed improper, the 
rejection of claims 19-21 are also believed improper for at least 
the same reasons as claim 18. 



In view of the foregoing. Appellant submits that the 
rejections of claims 1-15 and 17-21 are improper and respectfully 
requests that the rejections of claims 1-15 and 17-21 be reversed 
by the Board. 



Conclusion 



Respectfully submitted. 



Dated: April 13, 2006 




Ido/f uchman, Reg . No . 45, 924 
108th Street, Ste . 503 
Forest Hills, NY 11375 
Telephone (718) 544-1110 
Facsimile (718) 544-8588 
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C 1 aims Appendi x 

Claim 1. A system comprising; 

a plurality of certificate authorities (CAs) in which each CA 
maintains and distributes digital certificates revoked by itself in 
the form of a certificate revocation list (CRL) , and different CAs 
5 may use different CRL distribution mechanisms; 

multiple CRL retrieval agents configured to psriodically 
retrieve CRLs at time intervals from different CAs using a plurality 
of CRL retrieval agents based on the CRL distribution mechanisms of 
CAs; 

10 a plurality of CRL databases for storing the consolidated CRLs 

from the multiple CRL retrieval agents and/or the replications of 
CRLs, the CRL databases storing at least one individually 
identifiable revoked digital certificate; and 

a CRL access user interface for providing a uniform set of 

15 Application Program Interfaces for users accessing the CRLs in the 
CRL database, said system enabling consolidation and access of the 
certificate revocation lists (CRLs) from the plurality of certificate 
authorities (CAs) . 

Claim 2. A system according to claim 1, wherein said plurality 
of CRL databases include a central CRL database and a plurality of 
CRT. replication databases, said central CRL database for storing the 
consolidated CRLs from the multiple CRL retrieval agents, and said 
5 plurality of CRL replication databases for storing the replications 
of the CRLs of the central CRL database. 

Claim 3- A system according to claim 1, wherein said plurality 
of CRL retrieval agents include a LDAP/CRL retrieval agent, for 
periodically retrieving CRLs from specified LDAP servers and updating 
the CRL databases. 

Claim 4. A system according to claim 1, wherein said plurality 
of CRL retrieval agents include a KTTP/CRL retrieval agent, for 
periodically retrieving CRLs from specified HTTP servers and updating 
the CRL database. 

Claim 5. A system according to claim 1, wherein said plurality 
of CRL retrieval agents include a RFC1424/CRL retrieval agents, for 

- 10 - 

PACE 11/16 • RCVD AT 4/13/2006 3:20:47 PM [Eastern Daylight TTroe] * SVR:USPTO-EFXRF-5/16 * DN1S:27^300 • CStD:718 M4 8388 ' DURATION <mnvss):04^2 



Rpr 13 OB 03: 23p Ido 



718-544-8588 



p. 12 



Application Serial No. 09/754,813 

periodically sending Request For Comments 14 24 /Cert if icat e-Revocation 
List retrieval request and receiving CRL retrieval reply. 

Claim 6. A system according to claim 1, wherein said plurality 
of CRL retrieval agents include a Http retrieval agent triggered by a 
HTTP request, said Http receiver agent verifies an authorization of 
the requester, if successful, said agent stores each transmitted CRL 
5 in the CRL databases. 

Claim 7. A system according to claim 1, wherein said plurality 
of CRL retrieval agents further verifies the integrity and the 
authenticity of the retrieved CRLs. 

Claim 8. A system according to claim 1, wherein a particular 
replication architecture is used among said plurality of CRL 
databases in order to maintain database consistency. 

Claim 9. A system according to claim 2, wherein a hub-and- 
spoke replication architecture is used among said central CRL 
database and said plurality of CRI. replication databases. 

Claim 10- A system according to claim 1, wherein said system 
is also adapted for consolidating and accessing at least one kind of 
revoked cerLilicaLe iiisL. 

Claim 11. In a secure network implemented by digital 
certificates, a method for certificate revocation list (CRL) 
consolidation and access, wherein a plurality of certificate 
authorities (CAs) maintain and distribute the digital certificates 
5 revoked by themselves in the form of CRLs, and different CAs may use 
different CRL distribution mechanisms, said method comprising the 
steps of: 

periodically retrieving CRLs at time intervals from different 
CAs using a plurality of CRL retrieval agents based on the CRL 
10 distribution mechanisms of CAs; 

consolidating the CRLs from multiple CAs; 

storing the consolidated CRLs from multiple CRL retrieval 
agents or the replications of CRLs into a plurality of CRL databases, 
the consolidated CRLs including at least one individually 
15 identifiable revoked digital certificate; and 
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accessing the CRLs from the CRL databases by a uniform set of 
Application Program Interfaces. 

Claim 12. A method according to claim 11, said plurality of 
CRL databases include a central CRL database and a plurality of CRL 
replication database, said central CRL database for storing the 
consolidated CRLs from multiple CRL retrieval agents and said 
5 plurality of CRL replication database for storing the replications of 
the CRLs of the central database. 

Claim 13, A method according to claim 11, wherein said method 
is also adapted for consolidation and accessing all kinds of revoked 
certificate lists. 

Claim 14. An article of manufacture comprising a computer 
usable medium having computer readable program code means embodied 
therein for causing certificate revocation list (CRL) consolidation 
and access, the computer readable program code means in said article 
5 of manufacture comprising computer readable program code means for 
causing a computer Lo effect the steps of claim 11. 

Claim 15, A computer program product comprising a computer 
usable medium having computer readable program code means embodied 
therein for causing certificate revocation list (CRL) consolidation 
and access, the computer readable program code means in said computer 
5 program product comprising computer readable program code means for 
causing a computer to effect the steps of claim 11. 

Claim 17- A program storage device readable by machine, 
tangibly embodying a program of instructions executable by the 
machine to perform method steps for certificate revocation list (CRL) 
consolidation and access, said method steps comprising the steps of 
5 claim 1 1 . 

Claim 18. A method comprising: 

employing a secure network implemented by digital certificates 
for certificate revocation list (CRL) consolidation and access, with 
a plurality of certificate authorities (CAs) maintaining and 
5 distributing the digital certificates revoked by themselves in the 
form of CRLs, wherein different CAs may use different CRL 
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distribution mechanisms, including the steps of: 

creating a plurality of CRL retrieval agents based on the CRL 
distribution mechanisms of CAs , the retrieval agents configured to 
10 periodically retrieve CRLs at time intervals from the different CAs 
and to consolidate the CRLs from multiple CAs; 

storing the consolidated CRLs from multiple CRL retrieval 
agents or the replications of CRLs into a plurality of CRL databases, 
the consolidated CRLs including at least one individually 
15 identifiable revoked digital certificate; and 

accessing the CRLs form the CRT. databases by a uniform set of 
Application Program Interfaces. 

Claim 19. A program storage device readable by machine, 
tangibly embodying a program of instructions executable by the 
machine to perform method steps for certificate revocation list (CRL) 
consolidation and access, said method steps comprising the steps of 
5 claim 18 . 

Claim 20. An article- of 'manufacture comprising a computer 
usable medium having computer rtiS<3ib^e*^pf og^^am code means embodied 
therein for causing certificate revocation list (CRL) consolidation 
and access, the computer readable program code means in said article 
5 of manufacture comprising computer readable program code means for 
causing a computer to effect the steps of claim 18. 

Claim 21- A computer program product comprising a computer 
usable medium having computer readable program code means embodied 
therein for causing certificate revocation list (CRL) consolidation 
and access, the computer readable program code means in said computer 
5 program product comprising computer readable program code means for 
causing a computer to effect the steps of claim 18. 
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Evidence Appendix 

None . 



rHiSPAGEBUINKimo) 



PAGE IS/16 - RCVD AT 4/13/2008 3:20:47 PM [Eastern DayUght Time] * SVR:USPTO-EFXRF«S/16 - DN1S:2738300 * C8ID:718 544 8S88 * DURATION <mm-ss):04^2 



.Rpr 13 OB 03:24p Ido 718-544-8588 p.lG 

Patent Application No. 09/754,813 

Related Proceedings Appendix 

None . 



THiS PAGE BLANK (USPTO) 



PACE 18/16* RCVD AT 4/1 3/2008 3:20:47 PM [Eastem DayOght Tlmel * SVR:USPTO-EFXRF^18 • DH1S:2738300 ■ CSID:71 8 544 8588 • DURATION (mn>«s):04^2 



